FEED

FEED

Definition(s)


FEED

Front end engineering design. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
EWS

EWS

Definition(s)


EWS

Engineering Workstation. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
EPC

EPC

Definition(s)


EPC

Engineering, procurement and construction. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
EAP-TLS

EAP-TLS

Definition(s)


EAP-TLS

Extensible authentication protocol transport level security. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
DNS

DNS

Definition(s)


DNS

Domain name system. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
CSRS

CSRS

Definition(s)


CSRS

Cyber security requirement specification. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
BPCS

BPCS

Definition(s)


BPCS

Basic process control system. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
AD

AD

Definition(s)


AD

Active directory.

Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards

ACL

ACL

Definition(s)


ACL

Access control list. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
AAA

AAA

Definition(s)


AAA

Authentication, authorization and accounting. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Vendor

Vendor

Definition(s)


Vendor

In this context: vendor of safety and automation systems. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Threat Vector

Threat Vector

Definition(s)


Threat Vector

Path or means by which a threat source can gain access to an organizational asset.

Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards

Greenfield

Greenfield

Definition(s)


Greenfield

Project a new project not following a prior project or work. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Cyber Threat

Cyber Threat

Definition(s)


Cyber Threat

A circumstance or event that has, or indicates, the potential to exploit vulnerabilities and to adversely impact (create adverse consequences for) organizational operations, organizational assets (including information and information systems), individuals, other organizations, or society. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Brownfield Project

Brownfield Project

Definition(s)


Brownfield Project

A project following a prior project or work. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Asset Owner

Asset Owner

Definition(s)


Asset Owner

In this context, the asset owner is the oilfield operator. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Threat Levels

Threat Levels

Definition(s)


Threat Levels

A progressive, qualitative measure of the likelihood of adversarial actions, from negligible to imminent, based on government or company intelligence or information.
  • Note: Different fixed or variable security measures can be implemented based on the level of threat to the facility.

(Source: Security Vulnerability Assessment Methodology for the Petroleum and Petrochemical Industries.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Security Stakeholder

Security Stakeholder

Definition(s)


Security Stakeholder

Parties who have a direct or indirect vested interest in petroleum and natural gas industry systems infrastructure security.
  • Note: Examples include operators, governments, regulators, advocates, landowners, third parties, and members of the general public.
Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Security Partner

Security Partner

Definition(s)


Security Partner

Parties who, through formal or informal agreements, establish relationships with each other, governments, regulators, enforcement, and public safety agencies and participate in security risk assessments and risk mitigation strategies, including the sharing of information and the securing of petroleum and natural gas industry systems against acts of vandalism, terrorism, or other security threats.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Security Management Program

Security Management Program

Definition(s)


Security Management Program

An ongoing process to ensure security threats and associated risks are identified and managed with appropriate mitigation and response procedures to prevent and minimize the impact of security incidents adversely affecting people, the environment, assets, and economic stability.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
SMP

SMP

Definition(s)


SMP

Security management program. Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards  

SMP

An ongoing process to ensure security threats and associated risks are identified and managed with appropriate mitigation and response procedures to prevent and minimize the impact of security incidents adversely affecting people, the environment, assets, and economic stability. Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Security Countermeasure

Security Countermeasure

Definition(s)


Security Countermeasure

An action or activity intended to improve one or more aspects of the security system to mitigate a specific security risk.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Post Orders

Post Orders

Definition(s)


Post Orders

Written directions informing uniformed security officers of what they are required to do in the event of a security-related incident or threat.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards

Intrusion Detection System

Intrusion Detection System

Definition(s)


Intrusion Detection System

A system designed to detect the entry or attempted entry of a person or vehicle into an area.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Change Management

Change Management

Definition(s)


Change Management

A systematic process used to ensure internal and external changes are continuously evaluated in order to assess the potential impact that change will have on the SMP. Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Asset Characterization

Asset Characterization

Definition(s)


Asset Characterization

The systematic identification and ranking of assets that, if destroyed or damaged, could result in adverse consequences to the operator.
  • Note: Asset characterization can include surrounding and supporting infrastructure.
Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Asset Attractiveness

Asset Attractiveness

Definition(s)


Asset Attractiveness

An assessment of the perception of value of an asset from an adversary’s perspective that influences the likelihood of a security incident, based on factors such as location, ease of access, size, and vulnerability, with consideration being given to the threat environment.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards
Venteo

Venteo

Definition(s)


Venteo

Liberación intencional controlada de gas no quemado.

Source: Resolución Número 40687 de 18 Jul 2017 Por la cual se establecen los criterios técnicos para proyectos de perforación exploratoria de hidrocarburos costa afuera en Colombia. Columbia Ministerio de Minas y Energia, Regulations
Unidades Móviles de Perforación Costa Afuera (Mobile Offshore Drilling Units – MODUs)

Unidades Móviles de Perforación Costa Afuera (Mobile Offshore Drilling Units – MODUs)

Definition(s)


Unidades Móviles de Perforación Costa Afuera (Mobile Offshore Drilling Units - MODUs)

Instalaciones diseñadas o modificadas para participar en actividades de perforación. El término MODU incluye los barcos de perforación (drill ships), semisumergibles, sumergibles, jack-ups e instalaciones similares que puedan movilizarse sin mayor esfuerzo. Estas instalaciones pueden o no tener equipos de autopropulsión a bordo y pueden requerir equipos de posicionamiento dinámico o sistemas de amarre para mantener su posición.

Source: Resolución Número 40687 de 18 Jul 2017 Por la cual se establecen los criterios técnicos para proyectos de perforación exploratoria de hidrocarburos costa afuera en Colombia. Columbia Ministerio de Minas y Energia, Regulations
SwitchDeadman

SwitchDeadman

Definition(s)


SwitchDeadman

Control del sistema hombre muerto. Accionador del sistema de preventoras de reventones que permite la desconexión en caso de emergencia asociada a una pérdida de las señales de control (eléctrica y/o acústica).

Source: Resolución Número 40687 de 18 Jul 2017 Por la cual se establecen los criterios técnicos para proyectos de perforación exploratoria de hidrocarburos costa afuera en Colombia. Columbia Ministerio de Minas y Energia, Regulations